vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

Vue Vben Admin - Default Credentials

Vue Vben Admin 2.10.1 contains a broken authentication caused by hardcoded credentials in the backend, letting attackers log in without proper authorization, exploit requires access to the login interface. id: CVE-2025-25570 info: name: Vue Vben Admin - Default Credentials author: 0xAkoko severit...

CVE-2026-90528

A cross-site scripting (XSS) vulnerability exists in TDuckApp tduck-platform up to version 5.3 , specifically in the Form Write View component (file tduck-front/src/views/form/write/index.vue). The flaw is triggered by manipulating the submitShowCustomPageContent argument, enabling a remote attac...

EUVD-2026-77029

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed...

CVE-2026-36848

CVE-2026-36848 在 Gigamon-VUE OS（GVOS）设备的 8089 端口上的基于 Web 的管理引擎中发现了一个严重的路径遍历漏洞。该漏洞存在于 persistd 守护进程的旧版 H-VUE 子系统中，允许拥有网络访问权限的未授权远程攻击者以 root 权限读取任意文件并执行部分写操作（无法覆盖已有文件）。 1. 漏洞概述 CVE ID: CVE-2026-36848 目标端口: 8089（TornadoHTTP Web 应用程序） 受影响组件: /opt/tms/persistdpy/persistd.py 漏洞类型: 路径遍历（CWE-22） 影响:...

PT-2026-90865

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed...

Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin垂直越权漏洞与代码分析-CVE-2022-21660 一、前言 欢迎各位大佬们给该项目点一个start root@kitploit: https://github.com/flipped-aurora/gin-vue-admin/ 文章写完了之后，申请CVE有一些麻烦，不过好在还是申请到了，github的员工响应迅速 ps 申请CVE前，已经提交了CNVD 二、环境搭建 按照官方教程 root@kitploit: git clone https://github.com/flipped-aurora/gin-vue-admin.git 随后进入server目录...

CVE-2020-11883

CVE-2020-11883 vue-storefront-api 漏洞 🛠 设置 root@kitploit: $ yarn instal $ tsnd . 🧨 示例 消息格式 root@kitploit: $ tsnd . 在此示例中，我测试了 "Lights.ie" 页面。 🙀 免责声明 本应用程序仅用于测试目的，对于可能出现的任何问题，我不承担任何责任。请仅在您有权测试的地方进行测试。...

pulsar

Pulsar 这是什么？ Pulsar 是一款为红队、渗透测试人员和漏洞赏金猎人设计的自动化网络足迹扫描器。 它专注于在最小化基础设施知识的情况下发现组织公开资产。同时，通过网络数据可视化，它尝试给出基本的漏洞评分，以发现基础设施薄弱点及其与其他资源的关联。它也可用作自定义漏洞扫描器，适用于广泛且未知的范围。 本软件在设计时考虑了可用性和开放性，因此完全免费，使用其功能无需任何API密钥。 这不是什么？ 漏洞管理平台 完整的OSINT框架扫描器 追求即时结果的速度型工具 项目已停止维护/归档 由于关注度较低且缺乏社区支持，我将不再继续维护此项目。 仅进行安全补丁和修复。 欢迎自行分支。...

CVE-2024-6783

CVE-2024-6783 - Vue CVE Se ha descubierto una vulnerabilidad en Vue que permite a un atacante realizar XSS mediante contaminación de prototipos. El atacante podría modificar la cadena de prototipos de algunas propiedades como Object.prototype.staticClass o Object.prototype.staticStyle para ejecut...

Malicious Package

Overview vscode-vue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-82835

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-82835

A vulnerability in caoqianming django-vue-admin 1.0 allows improper access control through manipulation of the file_id argument at the /api/file/ endpoint. The attack is executable remotely with low privileges and no user interaction . Exploit code has been made public and is rated as proof-of-co...

CVE-2026-82835 caoqianming django-vue-admin file access control

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

EUVD-2026-68745

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

MAL-2026-14369 Malicious code in @syncraft-labs/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...

Malicious code in @syncraft-labs/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...

CVE-2026-77795 Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...

CVE-2026-77795

Dromara RuoYi-Vue-Plus (up to 5.6.2 ) is affected by an improper authorization vulnerability in the Workflow Endpoint component. The issue impacts the functions FlwInstanceController , FlwDefinitionController , FlwCategoryController , FlwSpelController , and TestLeaveController , allowing a remot...